4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47

Analysis

max time kernel
170s
max time network
173s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 09:56

Target

4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47.exe
Size

384KB
MD5

a3ac7ff363b43b671a8818d918268e55
SHA1

59de6d8942e224cd96f609740c211a50b82df7bb
SHA256

4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47
SHA512

e7a0c13c6b286bb30ad6094205f4388aa09891f3fa6b6b3250468a843a76ab8418788b46920d5aa026cfa6b21caa470415f7b1d1667d6d87a3dba93d72d046d1
SSDEEP

6144:6EH1C+Rixp8IlKlLwAqGKbb4E6hsQGqnT831vb7nWRuMcgHqS8OEiRm:6EgJD8IbSTIvbDWRuMPKiBo

Score

3^/10

Program crash 1 IoCs

Processes:

WerFault.exe

pid pid_target process target process

4696 4676 WerFault.exe 4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47.exe
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47.exe

pid process

4676 4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47.exe

pid	pid_target	process	target process
4696	4676	WerFault.exe	4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47.exe

pid	process
4676	4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47.exe

C:\Users\Admin\AppData\Local\Temp\4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47.exe
"C:\Users\Admin\AppData\Local\Temp\4d948775bba162bb75de684a4b278af4e80f8238e5d00571d0c67741a48a4b47.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4676

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -u -p 4676 -s 916
2⤵
- Program crash
PID:4696

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 444 -p 4676 -ip 4676
1⤵
PID:1132

memory/4676-132-0x0000000000400000-0x00000000004BD000-memory.dmp

Filesize
756KB

Download